AWS Verified Access
AWS Verified Access gives remote employees, contractors, and administrators access to corporate applications and infrastructure without a VPN.
What AWS Verified Access is
AWS Verified Access gives remote employees, contractors, and administrators access to corporate applications and infrastructure without a VPN. It evaluates each application request against access policies and trust information from AWS or third-party providers. Access is denied until a policy is defined, and policies can take account of user identity and device security state. It supports HTTP(S) and TCP applications, plus access to AWS resources such as EC2 instances through specified IP addresses and port ranges. For secured non-HTTP(S) applications, users can use the Connectivity Client, available for Windows Intel and macOS on Apple silicon or Intel. Administrators can manage the service through the AWS Management Console, CLI, SDKs, or Query API. Access attempts can be sent to Amazon S3, CloudWatch Logs, or Kinesis Data Firehose, with OCSF format support. Traffic from end users to endpoints over the internet uses TLS 1.2 or later. AWS secures the cloud infrastructure; customers handle security in the cloud and their configurations.
Good
- Supports HTTP(S) and TCP applications.
- Policies can consider identity and device security state.
- Access logs can be delivered to AWS logging services.
- Internet traffic to endpoints uses TLS 1.2 or later.
Watch out
- There is no free plan.
- Access is denied until a policy is defined.
- Non-HTTP(S) access requires a desktop client.
Who it suits
It suits organizations that need policy-based access for remote employees, contractors, or administrators. It is a fit for teams using HTTP(S) or TCP applications and willing to configure access policies and manage their in-cloud security responsibilities.
Verdict
AWS Verified Access is designed for organizations seeking VPN-free access governed by identity, device context, and defined policies. Buyers should account for policy setup, customer security responsibilities, and the paid pricing model.
Plans and prices
From AWS Verified Access's own pricing page, checked 9 Oct 2026.
| Plan | Price | What it gives you |
|---|---|---|
| Connectivity Client | Free | Desktop client for non-HTTP(S) applications · Windows Intel · macOS Apple silicon and Intel · Provided free of charge. |
| Non-HTTP(S) applications | $0.20 a month | $0.20/endpoint-hour in examples · 100 free client connections per endpoint per hour · $0.001 per connection-hour above free allowance in example · Standard AWS data transfer charges apply · Per active endpoint-hour in the US East examples; connection charges also apply above the free allowance. |
| HTTP(S) applications | $0.27 a month | First 148,800 app-hours: $0.27/hour · Next 74,400 app-hours in example: $0.20/hour · Data processed: $0.02/GB · Standard AWS data transfer charges apply · Per application-hour in the US East (Ohio) example; each partial application-hour is billed as a full hour. Additional tiers and data-processing charges apply. |
The facts
Each one read from AWS Verified Access's own pages, with the date it was checked.
Where it runs
- Client platforms
- The Connectivity Client is a desktop application for accessing secured non-HTTP(S) applications, with downloads listed for Windows Intel and macOS on Apple silicon or Intel.checked 9 Oct 2026
- Device posture
- Third-party device management integrations provide security context for assessing a device’s security and compliance state.checked 9 Oct 2026
The company
- Company
- Amazon Web Services says it launched in 2006.checked 9 Oct 2026
What it does
- Compliance responsibility
- AWS describes security as a shared responsibility, with AWS securing the cloud infrastructure and customers responsible for security in the cloud and their configurations.checked 9 Oct 2026
- Encryption
- Verified Access encrypts data in transit from end users to its endpoints over the internet using TLS 1.2 or later.checked 9 Oct 2026
- Integrations
- AWS IAM Identity Center supports authentication through SAML-based third-party identity providers, and Verified Access can connect directly to custom OpenID Connect-compatible identity providers.checked 9 Oct 2026
- Intended users
- AWS describes use cases for remote employees and external contractors, as well as IT administrators securing corporate applications and infrastructure resources.checked 9 Oct 2026
- Interfaces
- Administrators can work with Verified Access through the AWS Management Console, AWS CLI, AWS SDKs, or Query API.checked 9 Oct 2026
- Logging
- It logs access attempts and can deliver logs to Amazon S3, Amazon CloudWatch Logs, and Amazon Kinesis Data Firehose, with support for the OCSF logging format.checked 9 Oct 2026
- Partner ecosystem
- AWS lists integrations or partnerships involving Cisco, CrowdStrike, JumpCloud, CyberArk, IBM, Datadog, JAMF, Okta, and Trellix.checked 9 Oct 2026
- Policy inputs
- Access policies can use factors including user identity and device security state.checked 9 Oct 2026
- Purpose
- AWS Verified Access provides secure access to corporate applications and resources without a VPN.checked 9 Oct 2026
- Request evaluation
- It evaluates every application request using trust data from a selected AWS or third-party provider and access policies, and requests are denied by default until a policy is defined.checked 9 Oct 2026
- Supported access
- Verified Access supports HTTP(S) applications and TCP applications, and can provide access to AWS infrastructure resources such as EC2 instances over specified IP addresses and port ranges.checked 9 Oct 2026
Alternatives to AWS Verified Access
- 1
Cloudflare Gateway
Free planAndroidiOSWebAPI8.3$7 usage-based - 2
Pomerium
Free planOpen sourceWebAPILinuxmacOS8.3From $7 a month - 3
Twingate
Free planAndroidiOSWebAPI8.3From $5 a month - 4
NetBird
Free planAndroidiOSLinuxmacOS8.2From €6 a month - 5
Cloudflare Access
Free planAndroidiOSWebAPI7.8$7 usage-based - 6
FortiClient
Free planAndroidiOSLinuxmacOS7.8Free plan